AINewsnow

Malicious ChatGPT Share Link Could Run Code in Users' Sessions, Researchers Report

Security researchers found that a crafted ChatGPT share link could execute attacker code in the logged-in session of anyone opening it, exposing private chats and account access. OpenAI paid a $5,000 bounty after the flaw, tied to MathLive, was reported.

Read the full story at Techmeme ↗

Timeline · 4 reports

  1. 2026-11-01 01:07 · DEV Community — AI
    A ChatGPT Share Link Hijacks Accounts, and Malware Now Ranks Victims by Worth
  2. 2026-10-31 23:01 · DEV Community — AI
    A ChatGPT Share Link Could Run Code Through MathLive. MathLive 0.111.2 Now Checks Origins
  3. 2026-10-31 19:01 · Techmeme
    Researchers are paid $5K for reporting a bug to OpenAI that would let attackers run code in logged-in sessions of all who opened the hacker's ChatGPT share link
  4. 2026-10-31 05:33 · The Hacker News (security)
    A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats

More stories

  1. Mistral releases weights for trillion-parameter Le Chonk model with 1M-token context — Wired AI
  2. OpenAI cuts fundraising target to $20 billion amid AI market selloff — Financial Times AI
  3. OpenAI tightens ChatGPT limits on weapons information for teen users — Reuters AI
  4. New AI benchmarks and audits spark rivalry among leading frontier models — TheAIGRID
  5. Cognizant commits more than 25,000 professionals to OpenAI delivery as enterprises move frontier AI into production — The Globe and Mail
  6. OpenAI Raises Less Than Half of $30 Billion Target in Latest Funding Round — Wall Street Journal Technology
  7. OpenAI unveils Community Safety Report and new teen protections in ChatGPT — OpenAI News
  8. Patrick Stewart was thinking about AI ethics years before ChatGPT launched — Fast Company AI

Get the daily brief of stories like this at 6:30 every morning →